An employee with "ill-intention" at Desjardins Group collected information about nearly three million people and businesses and shared it with people outside the Quebec-based financial institution, officials revealed Thursday.